| #101 | WordLift – AI powered SEO – Schema | 24 | 278 | 949 | 400 | | | Non-prefixed hook name |
| #102 | Paymattic – Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management | 33 | | 538 | 3k+ | | | Direct Query |
| #103 | Image Gallery Block | 84 | 9 | 22 | 2k+ | | | Non-prefixed global variable |
| #104 | Affiliate Links – Link Cloaking and Management | 39 | 23 | 113 | 3k+ | | | Non-prefixed global variable |
| #105 | Booking for Appointments and Events Calendar – Amelia | 25 | 1,487 | 480 | 90k+ | | | Exception output is not escaped |
| #106 | Check & Log Email – Easy Email Testing & Mail logging | 98 | 3 | 10 | 100k+ | | | Non-prefixed constant |
| #107 | File Manager | 53 | 41 | 68 | 10k+ | | | Missing direct file access protection |
| #108 | Leverage Browser Caching | 100 | | 1 | 10k+ | | | Missing Version |
| #109 | Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator | 46 | 13 | 25 | 7k+ | | | Request data is not unslashed |
| #110 | PiWeb Min/Max Quantity & Minimum Order Limits for WooCommerce | 78 | | 41 | 700 | | | Nonce verification recommended |
| #111 | Payments via PayMongo for WooCommerce | 39 | 36 | 81 | 1k+ | | | Nonce verification recommended |
| #112 | Sola Payment Gateway for WooCommerce | 35 | 107 | 116 | 700 | | | Missing Translators Comment |
| #113 | CatalogX – Catalog Mode, Enquiry & Quotes for WooCommerce | 36 | 165 | 69 | 5k+ | | | Text Domain Mismatch |
| #114 | Zotpress | 42 | 10 | 403 | 2k+ | | | Non-prefixed global variable |
| #115 | Asesor de Cookies RGPD para normativa europea | 37 | 92 | 87 | 20k+ | | | wp function not compatible with requires wp |
| #116 | Bookmark Card | 100 | 1 | 0 | 700 | | | Missing direct file access protection |
| #117 | Message Filter for Contact Form 7 | 24 | 1,057 | 1,594 | 1k+ | | | Non-prefixed global variable |
| #118 | WP Customer Area | 24 | 3,306 | 941 | 10k+ | | | Text Domain Mismatch |
| #119 | Easy Upload Files During Checkout | 33 | 218 | 199 | 500 | | | Unsafe printing function |
| #120 | Favorites | 39 | 187 | 123 | 10k+ | | | Unsafe printing function |
| #121 | Flex Posts – Responsive Posts Block | 100 | | 0 | 3k+ | | | No open findings |
| #122 | Flip Box Block | 100 | 3 | 1 | 2k+ | | | Missing Arg Domain |
| #123 | FooGallery Migrate | 35 | 41 | 232 | 1k+ | | | Non-prefixed global variable |
| #124 | Frontend Post Submission Manager Lite – Frontend Posting WordPress Plugin | 27 | 213 | 495 | 2k+ | | | Non-prefixed global variable |
| #125 | Starter Templates by Gradient Themes | 83 | 27 | 7 | 3k+ | | | Text Domain Mismatch |
| #126 | HEIC Support | 100 | 1 | 0 | 5k+ | | | wp function not compatible with requires wp |
| #127 | Liza Widget For Spotify and Elementor | 27 | 609 | 1,287 | 1k+ | | | Non-prefixed global variable |
| #128 | MaxButtons – Create buttons | 25 | 626 | 404 | 70k+ | | | Output is not escaped |
| #129 | Plausible Analytics | 35 | 244 | 61 | 10k+ | | | Exception output is not escaped |
| #130 | Post Layouts | 98 | | 18 | 1k+ | | | Non-prefixed class |
| #131 | Proxy & VPN Blocker | 44 | | 74 | 1k+ | | | Nonce verification recommended |
| #132 | Restrict – membership, site, content and user access restrictions for WordPress | 25 | 539 | 1,401 | 2k+ | | | Non-prefixed global variable |
| #133 | SEO Booster | 27 | 422 | 1,456 | 1k+ | | | Non-prefixed global variable |
| #134 | ShinyStat Analytics | 43 | 65 | 8 | 1k+ | | | Output is not escaped |
| #135 | Simple User Avatar | 61 | 8 | 14 | 20k+ | | | Output is not escaped |
| #136 | Timeline Blocks for Gutenberg | 98 | | 15 | 500 | | | Non-prefixed class |
| #137 | Trusty Whistleblowing Solution | 44 | 234 | 16 | 400 | | | Text Domain Mismatch |
| #138 | Video Background Block – Use video as background in section. | 75 | 35 | 90 | 2k+ | | | Non-prefixed global variable |
| #139 | WEDOS | Protection & Cache Performance | 100 | | 1 | 800 | | | trademarked term |
| #140 | WIP Custom Login | 43 | 21 | 37 | 700 | | | Nonce verification recommended |
| #141 | WPC Frequently Bought Together for WooCommerce | 40 | 63 | 109 | 10k+ | | | Output is not escaped |
| #142 | Skroutz & Bestprice XML feed for WooCommerce | 39 | 135 | 3 | 1k+ | | | Output is not escaped |
| #143 | WP Sitemap Pages and Posts | 99 | | 7 | 1k+ | | | trademarked term |
| #144 | WPC Composite Products for WooCommerce | 41 | 11 | 73 | 9k+ | | | Missing nonce verification |
| #145 | WPC Linked Variation for WooCommerce | 98 | | 15 | 3k+ | | | Non-prefixed class |
| #146 | WPC Product Videos for WooCommerce | 98 | | 15 | 3k+ | | | Non-prefixed class |
| #147 | WPC Sticky Add To Cart for WooCommerce | 98 | | 17 | 2k+ | | | Non-prefixed class |
| #148 | Academy LMS | 61 | 18 | 520 | 2k+ | | | Non-prefixed global variable |
| #149 | Accessibility Widget by OneTap – Easy One-Click Accessibility Toolbar | 98 | 4 | 18 | 50k+ | | | Non-prefixed global variable |
| #150 | Add Featured Image to RSS Feed | 100 | | 0 | 2k+ | | | No open findings |